Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69202 | high | 7.5 | No | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according t... | 2026-09-16 |
| CVE-2026-69212 | medium | 5.9 | No | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and... | 2026-09-16 |
| CVE-2026-69201 | medium | 5.9 | No | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode each URL path segmen... | 2026-09-16 |
| CVE-2026-82067 | high | 8.1 | No | Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to r... | 2026-09-16 |
| CVE-2026-82066 | high | 8.1 | No | A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read... | 2026-09-16 |
| CVE-2026-82065 | medium | 6.5 | No | A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges t... | 2026-09-16 |
| CVE-2026-82064 | high | 7.5 | No | A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set mem... | 2026-09-16 |
| CVE-2026-63696 | critical | 9.1 | No | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privil... | 2026-09-16 |
| CVE-2026-63695 | critical | 9.8 | No | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability. An unauthenticated attacker with remo... | 2026-09-16 |
| CVE-2026-82063 | medium | 5.3 | No | A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of servi... | 2026-09-16 |
| CVE-2026-86106 | critical | 9.6 | No | An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. Th... | 2026-09-16 |
| CVE-2026-77191 | low | 2.6 | No | An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send unrestricted traffic during a b... | 2026-09-16 |
| CVE-2026-75945 | low | 2.6 | No | A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued. | 2026-09-16 |
| CVE-2026-75944 | low | 2.6 | No | A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently r... | 2026-09-16 |
| CVE-2026-75943 | low | 2.6 | No | A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CL... | 2026-09-16 |
| CVE-2026-82062 | medium | 5.5 | No | A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the a... | 2026-09-16 |
| CVE-2026-82061 | high | 8.1 | No | A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges... | 2026-09-16 |
| CVE-2026-82060 | medium | 5.4 | No | In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specia... | 2026-09-16 |
| CVE-2026-82059 | medium | 6.5 | No | An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being re... | 2026-09-16 |
| CVE-2026-82058 | medium | 6.5 | No | A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod... | 2026-09-16 |